Where does MARS get netbios information?

[Bill]

When you click on a device from the Attack Diagram, then go to More Information for the Device, MARS will display the domain name and the Netbios name.

Just wondering where it is getting the Netbios name.

Often times it is wrong,(but consistent).

Thanks

[tstanik]

NetBIOS provides name registration and resolution services. MARS uses this setting to provide attack path analysis and address resolution

For the further description following URL may help you

http://www.cisco.com/en/US/products/ps6241/products_user_guide_chapter09186a008074f212.html#wp1160872